Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/d6e796-0e14-45b1-9cf3-5ad58abfbb1f/1/TtPmYeWLI9uvuaqb5x2zDGNz5uo.roa
File: TtPmYeWLI9uvuaqb5x2zDGNz5uo.roa (raw, json)
Hash identifier: tcCO1aKPlighBkoP4mig34FofKQZ1Q9RJgTmQ+dHJ7A=
Subject key identifier: 4E:D3:E6:61:E5:8B:23:DB:AF:B9:AA:9B:E7:1D:B3:0C:63:73:E6:EA
Certificate issuer: /CN=93202129969576ce357fae26c9c7cf98a8250ea6
Certificate serial: 018CC56EA107D48AA435BBF9CF204A458757
Authority key identifier: 93:20:21:29:96:95:76:CE:35:7F:AE:26:C9:C7:CF:98:A8:25:0E:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kyAhKZaVds41f64mycfPmKglDqY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/d6e796-0e14-45b1-9cf3-5ad58abfbb1f/1/TtPmYeWLI9uvuaqb5x2zDGNz5uo.roa
Signing time: Mon 01 Jan 2024 14:30:10 +0000
ROA not before: Mon 01 Jan 2024 14:30:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 1299
IP address blocks: 85.220.0.0/17 maxlen: 17
157.157.0.0/16 maxlen: 16
31.209.192.0/18 maxlen: 18
2001:1a98::/32 maxlen: 32
Validation: Failed, certificate revoked on Sun 03 Mar 2024 14:45:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:a1:07:d4:8a:a4:35:bb:f9:cf:20:4a:45:87:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93202129969576ce357fae26c9c7cf98a8250ea6
Validity
Not Before: Jan 1 14:30:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4ed3e661e58b23dbafb9aa9be71db30c6373e6ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:a8:db:df:a6:42:e7:c3:06:9e:9f:7d:32:65:
2b:68:0a:fa:86:99:3e:68:ed:4d:d1:9a:b6:50:bd:
b3:83:2f:55:99:3e:2a:de:5f:4c:36:82:5c:d4:31:
df:b7:86:b6:4e:b7:4a:cf:b7:2c:1e:f4:b7:56:77:
c9:47:6f:d2:1d:d5:01:cd:94:40:c6:42:6a:db:69:
00:1b:4f:f3:60:51:42:c7:ab:80:9e:6e:7c:6f:ba:
dc:24:ac:d7:48:f1:12:98:43:2b:b5:1d:ab:f6:7e:
c6:a8:24:04:94:77:51:a4:6b:68:85:01:52:c3:42:
e7:5b:fb:26:78:e5:24:3e:f2:b8:7e:7e:39:4f:cf:
c6:cb:0d:7a:77:18:fc:d6:b3:5e:73:2e:57:a5:db:
01:51:86:e5:42:c2:57:87:5d:ea:f0:f1:a5:cd:16:
92:e8:a5:d9:01:fa:23:7a:cf:bc:03:37:87:d9:61:
09:9b:42:39:30:8a:b1:ec:f9:0f:e3:2d:68:95:b1:
1f:ec:87:a1:1a:6a:04:1e:65:ca:af:95:ba:4d:4f:
2f:d1:db:37:fd:e2:84:19:c2:5b:8f:c4:10:91:dc:
da:3e:d7:b9:89:ee:38:9a:28:b3:74:c6:89:f3:bf:
1e:a6:db:c1:92:dd:14:97:15:60:7c:a7:ff:8e:c2:
dc:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:D3:E6:61:E5:8B:23:DB:AF:B9:AA:9B:E7:1D:B3:0C:63:73:E6:EA
X509v3 Authority Key Identifier:
keyid:93:20:21:29:96:95:76:CE:35:7F:AE:26:C9:C7:CF:98:A8:25:0E:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kyAhKZaVds41f64mycfPmKglDqY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/d6e796-0e14-45b1-9cf3-5ad58abfbb1f/1/TtPmYeWLI9uvuaqb5x2zDGNz5uo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/d6e796-0e14-45b1-9cf3-5ad58abfbb1f/1/kyAhKZaVds41f64mycfPmKglDqY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.209.192.0/18
85.220.0.0/17
157.157.0.0/16
IPv6:
2001:1a98::/32
Signature Algorithm: sha256WithRSAEncryption
01:fb:32:f8:05:c6:8d:16:c8:e4:1d:d3:cc:d9:b8:94:51:0e:
0b:37:72:1c:b4:4e:11:fc:f8:65:ee:13:5f:e1:d1:93:e0:05:
27:49:64:57:36:3e:99:0d:3a:61:42:01:6c:df:10:2f:5d:7e:
d6:2e:0f:26:fc:ca:3d:77:70:77:f2:ea:26:1b:1a:3c:9a:b9:
a8:9d:8f:84:3f:0e:13:77:d3:0b:57:67:ba:60:57:8b:ca:f2:
3e:92:57:c2:b3:5b:74:85:5a:54:04:3d:1f:74:94:f8:a3:d9:
70:e4:4b:18:9e:83:64:da:d0:1d:ad:b3:48:ec:5f:e2:25:d9:
01:e0:81:af:c3:73:5f:3e:91:42:4a:fd:a0:09:35:27:5f:ed:
ad:9d:8d:ec:76:83:5f:1a:8e:b9:7b:5b:78:f4:d1:24:22:92:
e1:d5:3e:6d:de:0c:ba:b5:b7:8e:51:88:de:67:32:f4:4a:ee:
22:84:96:0e:c7:f4:f2:76:dc:f2:2d:1e:8f:82:4a:a1:5e:22:
35:a4:33:03:fa:b7:88:9e:bd:fd:14:e9:00:5c:1f:85:b1:95:
9f:e5:5a:f3:70:a2:5f:1a:78:20:0b:2f:f9:f8:5e:7e:50:a8:
ac:95:cb:fe:f7:77:88:0f:b9:08:5e:b9:3e:32:e4:d7:84:37:
da:1c:a4:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:39:53 2024 by rpki-client on console-ams.rpki-client.org